Are there really three DNS servers for that domain? I see three NS records, but two of those resolve to the same IP address and the third is legacy-only. The one authoritative I can query does indeed give me a REFUSED response, so at least in that regard my observations agree with yours.